Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/agk7X1QrgHoXmEJANjYMvcZJ2IY.roa
File: agk7X1QrgHoXmEJANjYMvcZJ2IY.roa (raw, json)
Hash identifier: VN+Fof5ZuZiFN5AeZBhTiS+uQvoBH1XE8kKSZKGRs60=
Subject key identifier: 6A:09:3B:5F:54:2B:80:7A:17:98:42:40:36:36:0C:BD:C6:49:D8:86
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 446D
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/agk7X1QrgHoXmEJANjYMvcZJ2IY.roa
Signing time: Thu 10 Mar 2022 00:36:49 +0000
ROA not before: Thu 10 Mar 2022 00:36:49 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17517 (0x446d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 10 00:36:49 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=6A093B5F542B807A1798424036360CBDC649D886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:92:d2:ab:48:c6:ab:e2:c9:44:3d:da:bc:d7:
31:57:e5:ed:96:05:a2:6d:cf:73:cc:38:04:48:d0:
ab:e3:be:da:6a:f4:92:b2:81:26:49:e5:b5:bb:33:
0b:fd:07:40:71:a5:73:6f:f2:51:0f:50:02:0f:2e:
ec:05:d0:47:70:4a:43:4f:e0:f7:9f:96:b8:62:4f:
81:52:d7:fc:0f:75:dc:fe:ef:a6:ee:12:a6:97:7a:
8f:31:fa:03:58:c2:f7:2e:07:8e:d1:5b:4f:15:7f:
4e:d6:0c:91:97:ae:32:1b:3b:c3:a5:cb:01:ec:78:
b6:39:cb:c9:d6:ff:3e:ba:9f:4b:8b:39:4f:98:1b:
8c:c6:30:ee:99:c9:ed:66:29:33:e4:20:3f:bc:b0:
dd:29:ba:aa:9e:49:03:b6:0c:26:38:fb:ee:3d:15:
02:2d:33:ec:9a:b3:d1:e4:ac:07:3e:b0:2a:bb:89:
15:06:07:24:7c:a8:d7:fc:7b:b5:8f:c0:3f:d9:62:
59:0f:54:e3:67:7a:e6:56:32:4a:b8:95:f6:ee:d1:
4a:35:4d:d3:ac:c0:44:e2:77:e1:0d:f8:e9:67:57:
21:89:1d:d4:f3:d8:54:61:ce:65:35:79:99:62:76:
a2:05:19:af:8b:5f:5f:82:84:70:78:1e:9d:2e:f2:
0e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:09:3B:5F:54:2B:80:7A:17:98:42:40:36:36:0C:BD:C6:49:D8:86
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/agk7X1QrgHoXmEJANjYMvcZJ2IY.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
14:2b:6b:64:f1:d6:c4:69:27:f6:ac:c4:33:eb:f3:9b:2a:82:
60:91:20:ea:8b:c9:50:02:96:d9:59:36:c7:1f:0a:a7:ab:51:
2f:87:d0:9e:01:d4:74:6b:0e:3b:72:72:04:d5:f7:89:97:47:
b2:2f:93:32:76:06:9e:68:f3:9f:f8:ab:1b:25:aa:0e:61:ab:
7e:30:c3:c3:2a:c5:80:fa:c6:31:22:94:f4:b6:64:ab:2d:88:
17:f8:8c:96:af:04:96:25:96:d3:90:e3:2c:50:a2:0c:39:83:
e9:3a:05:50:93:27:43:30:cf:81:14:49:08:f1:da:2b:ec:db:
ac:15:4a:8d:f5:a0:11:88:2a:65:ac:61:a0:eb:12:ae:87:e4:
7b:79:6a:f2:69:c2:79:77:bc:ba:9c:97:18:48:90:62:0d:f2:
b5:b3:78:f6:37:78:97:e0:4a:bd:08:49:74:6d:53:cd:a4:19:
86:b4:a3:31:f0:55:0c:8b:3b:cf:77:bb:d6:ab:5a:76:b8:af:
1b:12:23:78:37:a0:92:a7:d9:74:b6:52:87:87:a3:ee:69:5b:
f4:fa:d1:06:29:08:68:11:3a:3e:60:76:4e:df:63:43:a8:62:
a1:13:d0:63:98:23:42:05:7c:5c:7e:98:42:35:6e:27:86:b3:
a1:bd:a7:61
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRG0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAzMTAw
MDM2NDlaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKDZBMDkzQjVGNTQyQjgw
N0ExNzk4NDI0MDM2MzYwQ0JEQzY0OUQ4ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDaktKrSMar4slEPdq81zFX5e2WBaJtz3PMOARI0Kvjvtpq9JKy
gSZJ5bW7Mwv9B0BxpXNv8lEPUAIPLuwF0EdwSkNP4PeflrhiT4FS1/wPddz+76bu
EqaXeo8x+gNYwvcuB47RW08Vf07WDJGXrjIbO8OlywHseLY5y8nW/z66n0uLOU+Y
G4zGMO6Zye1mKTPkID+8sN0puqqeSQO2DCY4++49FQItM+yas9HkrAc+sCq7iRUG
ByR8qNf8e7WPwD/ZYlkPVONneuZWMkq4lfbu0Uo1TdOswETid+EN+OlnVyGJHdTz
2FRhzmU1eZlidqIFGa+LX1+ChHB4Hp0u8g75AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUagk7X1QrgHoXmEJANjYMvcZJ2IYwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9hZ2s3WDFRcmdIb1htRUpBTmpZTXZjWkoySVkucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHA8wDQYJKoZIhvcNAQELBQADggEB
ABQra2Tx1sRpJ/asxDPr85sqgmCRIOqLyVACltlZNscfCqerUS+H0J4B1HRrDjty
cgTV94mXR7IvkzJ2Bp5o85/4qxslqg5hq34ww8MqxYD6xjEilPS2ZKstiBf4jJav
BJYlltOQ4yxQogw5g+k6BVCTJ0Mwz4EUSQjx2ivs26wVSo31oBGIKmWsYaDrEq6H
5Ht5avJpwnl3vLqclxhIkGIN8rWzePY3eJfgSr0ISXRtU82kGYa0ozHwVQyLO893
u9arWna4rxsSI3g3oJKn2XS2UoeHo+5pW/T60QYpCGgROj5gdk7fY0OoYqET0GOY
I0IFfFx+mEI1bieGs6G9p2E=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org